Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3634203d3e20323632313936.roa
File:                     323830303a6162303a3a2f33322d3634203d3e20323632313936.roa (raw, json)
Hash identifier:          2TQDcR+ndZUq0ndIm7P1dCWl8E4+o896vDPK+zSj+gY=
Subject key identifier:   73:4F:ED:54:9B:B0:62:0E:55:AD:D3:5E:5E:35:36:5D:1D:CB:9C:74
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       37CACE9E91EFCE3F8BBABB6BC9DD36E88ED1FB2C
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3634203d3e20323632313936.roa
Signing time:             Wed 04 Dec 2024 19:25:01 +0000
ROA not before:           Wed 04 Dec 2024 19:20:01 +0000
ROA not after:            Wed 03 Dec 2025 19:25:01 +0000
asID:                     262196
IP address blocks:        2800:ab0::/32 maxlen: 64
Validation:               Failed, certificate revoked on Tue 17 Dec 2024 21:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ca:ce:9e:91:ef:ce:3f:8b:ba:bb:6b:c9:dd:36:e8:8e:d1:fb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Dec  4 19:20:01 2024 GMT
            Not After : Dec  3 19:25:01 2025 GMT
        Subject: CN=734FED549BB0620E55ADD35E5E35365D1DCB9C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1a:77:ec:98:f4:14:3a:1e:a5:a8:ed:0a:9a:
                    41:de:39:a0:38:6c:0f:f8:0d:5a:da:78:1f:d2:66:
                    d2:bc:d5:ae:50:2e:23:64:8e:ae:41:6e:51:55:ac:
                    b1:49:f1:56:1f:f6:10:a9:e4:e2:3f:d7:ea:6e:64:
                    7e:36:c6:88:48:f7:14:c2:60:e7:1f:d2:d8:92:d6:
                    e6:18:80:42:6d:37:65:ee:d7:81:26:04:e0:d0:d7:
                    15:60:89:11:09:fd:41:80:9f:ea:2f:29:e0:ab:29:
                    4b:b7:a5:08:8d:ac:90:1c:f7:9a:5d:84:5a:b4:3b:
                    f1:43:dc:73:02:93:52:a9:56:c1:a2:75:5b:a3:a9:
                    7f:b1:f7:3a:42:14:f2:8f:ef:39:b8:cb:7e:87:4e:
                    a5:aa:65:47:61:dd:be:e2:34:29:32:b4:2c:29:6a:
                    23:7f:c9:57:55:c3:da:5f:a7:bd:4f:99:5b:5f:f1:
                    f9:44:a2:c1:25:d4:31:e7:50:1c:ad:20:ea:6f:1b:
                    1f:94:aa:7b:9d:92:55:90:73:d3:ed:d6:7c:c3:e1:
                    4e:ba:11:33:7f:ee:6b:2c:e2:a4:d7:9e:ae:97:b4:
                    9a:f6:33:e0:9e:df:e3:28:7c:5c:40:9d:b0:20:1d:
                    06:fb:0b:e0:b6:df:0e:8f:03:fa:bf:de:cc:78:76:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4F:ED:54:9B:B0:62:0E:55:AD:D3:5E:5E:35:36:5D:1D:CB:9C:74
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3634203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:1d:34:3c:1d:21:ef:b9:1a:d4:8b:ca:42:30:fd:ea:3c:94:
         91:7a:a1:1d:ba:85:7d:64:cb:35:5b:13:aa:bf:d9:cc:e8:53:
         22:d6:d6:e7:4e:2d:59:9e:5c:94:af:52:2b:8f:45:13:b4:ba:
         d7:d1:cf:e9:81:f4:da:e5:c1:bb:27:5a:54:ef:0e:58:6a:2d:
         10:95:6f:bb:61:09:8c:e0:94:0b:86:ff:e4:38:68:81:1e:83:
         8d:0c:42:e2:29:d6:86:d6:18:97:5c:97:59:25:0d:2c:8d:ad:
         20:9e:2d:3a:b2:74:0c:e6:63:41:73:f6:ac:d7:44:61:08:44:
         d8:02:e7:46:64:a4:f8:18:70:e2:0b:1d:7d:25:2a:be:45:0a:
         ec:90:ad:6c:45:73:7c:aa:39:78:eb:41:ea:f5:78:ee:ce:8e:
         2b:a4:c9:49:d0:a9:34:af:ed:c4:fa:53:37:42:53:ca:c8:1e:
         90:57:76:37:f3:48:59:7e:87:a1:38:5f:ce:9b:a4:ca:af:0e:
         d5:11:ff:1d:b5:7e:10:3b:e7:1b:20:42:dd:17:39:52:55:14:
         b6:22:31:c6:42:bf:38:23:cb:59:74:91:ea:02:7e:3e:af:e5:
         86:da:85:18:a2:5a:fc:d5:ee:8a:c1:2b:75:bd:f7:22:cf:15:
         d7:05:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----